Privacy Policy

1. Information We Collect

We collect information to provide better services to our users and ensure compliance with advertising standards, including those required by Google Ads policy for legitimate business purposes.

1.1 Information You Provide Directly

• Contact Information: Name, email address, phone number, mailing address
• Account Information: Username, password, preferences when you create an account
• Consultation Information: Skin type, beauty concerns, product preferences shared during consultations
• Communication: Messages, feedback, and correspondence you send to us
• Payment Information: Billing address and payment method details (processed securely by our payment processors)
• Marketing Preferences: Your choices regarding marketing communications

1.2 Information Collected Automatically

• Usage Data: Pages visited, time spent on site, click-through rates
• Device Information: IP address, browser type, operating system, device identifiers
• Cookies and Tracking: See our Cookie Policy for detailed information
• Location Data: General location based on IP address to serve relevant content
• Analytics Data: Website performance metrics and user interaction data

2. How We Use Your Information

We use your information for legitimate business purposes that align with Google Ads policy requirements and Canadian privacy laws:

• Service Provision: To provide personalized skincare consultations and product recommendations
• Order Processing: To process transactions, fulfill orders, and provide customer support
• Communication: To respond to inquiries, send order updates, and provide customer service
• Marketing: To send promotional materials and newsletters (with your consent)
• Website Improvement: To analyze usage patterns and improve our website functionality
• Legal Compliance: To comply with applicable laws and protect our legal rights
• Fraud Prevention: To detect and prevent fraudulent transactions and activities
• Advertising: To serve relevant advertisements through compliant advertising practices

3. Legal Basis for Processing

We process your personal information based on the following legal grounds:

• Consent: When you provide explicit consent for marketing communications or cookies
• Contract Performance: To fulfill orders and provide requested services
• Legitimate Interests: For business operations, security, and website improvement
• Legal Obligation: To comply with Canadian laws and regulations

4. Information Sharing and Disclosure

We do not sell your personal information. We may share information in the following circumstances:

4.1 Service Providers

• Payment processors for secure transaction handling
• Shipping companies for order fulfillment
• Email service providers for communications
• Analytics providers for website performance analysis
• Customer support platforms

4.2 Legal Requirements

• When required by Canadian law or court orders
• To protect our rights, property, or safety
• To investigate suspected fraud or violations of our terms
• In connection with legal proceedings

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the new entity, with appropriate privacy protections maintained.

5. Data Security

We implement comprehensive security measures to protect your personal information, following industry best practices and Google Ads policy requirements for data protection:

• Encryption: SSL/TLS encryption for data transmission
• Secure Storage: Encrypted storage of sensitive information
• Access Controls: Limited access to personal information on a need-to-know basis
• Regular Audits: Security assessments and vulnerability testing
• Staff Training: Regular privacy and security training for employees
• Incident Response: Procedures for handling potential data breaches

6. Data Retention

We retain personal information only as long as necessary for the purposes outlined in this policy:

• Account Information: While your account is active and for 7 years after closure
• Transaction Records: 7 years for tax and accounting purposes
• Marketing Data: Until you unsubscribe or object to processing
• Website Analytics: 26 months for Google Analytics data
• Consultation Records: 3 years for service quality and follow-up purposes

7. Your Privacy Rights

Under Canadian privacy law, you have the following rights regarding your personal information:

• Access: Request access to personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Withdrawal of Consent: Withdraw consent for marketing communications
• Complaint: File a complaint with the Privacy Commissioner of Canada
• Data Portability: Request transfer of your data in a structured format
• Deletion: Request deletion of personal information (subject to legal requirements)

To exercise these rights, please contact us using the information provided in Section 11.

8. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your browsing experience and analyze website usage. Our cookie practices comply with Google Ads policy requirements for user consent and transparency. For detailed information, please see our Cookie Policy.

8.1 Types of Cookies We Use

• Essential Cookies: Required for website functionality
• Analytics Cookies: Help us understand how visitors use our site
• Marketing Cookies: Used to deliver relevant advertisements
• Preference Cookies: Remember your settings and preferences

9. Third-Party Services and Advertising

Our website may contain links to third-party websites and use third-party services. We maintain advertising practices that comply with Google Ads policy standards for user privacy and transparent data collection.

9.1 Third-Party Services We Use

• Google Analytics: Website analytics and performance measurement
• Google Ads: Advertising services with compliant tracking and targeting
• Social Media Platforms: Facebook, Instagram, Twitter for social media integration
• Payment Processors: Secure payment processing services
• Email Services: Newsletter and transactional email delivery

9.2 Advertising and Marketing

Our advertising practices strictly adhere to Google Ads policy requirements, ensuring that:

• All data collection for advertising purposes is transparent and consensual
• User privacy preferences are respected in all marketing activities
• Advertising content is accurate and not misleading
• Sensitive personal information is not used for advertising targeting

10. International Data Transfers

Your personal information may be processed and stored outside of Canada when we use third-party service providers. We ensure appropriate safeguards are in place, including:

• Contractual protections requiring adequate privacy standards
• Verification that service providers comply with recognized privacy frameworks
• Regular monitoring of data handling practices
• Compliance with Canadian requirements for international transfers

11. Contact Information and Complaints

If you have questions about this Privacy Policy, want to exercise your privacy rights, or have concerns about our data practices, please contact us:

11.1 Filing a Complaint

If you are not satisfied with our response to your privacy concerns, you may file a complaint with:

12. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. Material changes will be communicated through:

• Email notification to registered users
• Prominent notice on our website
• Updated revision date at the top of this policy

We encourage you to review this policy regularly to stay informed about how we protect your privacy. Our commitment to transparency in privacy practices supports our compliance with Google Ads policy requirements for clear user communication.

13. Effective Date

This Privacy Policy is effective as of January 1, 2025, and applies to all personal information collected by Soon Cosmetic through our website and services.